Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a323335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Ibqv/kYuwYwnaZkdIJb44FuKqtS6IoB7CQpbavdsQ0Y=
Subject key identifier:   59:70:AF:31:38:4D:D3:BA:9A:D8:4C:4C:75:8D:0F:B2:4B:26:BF:71
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       56D0494F46C8EB6CF07B8C5242FC9845297E52F2
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 23:55:01 +0000
ROA not before:           Sun 20 Feb 2022 23:50:01 +0000
ROA not after:            Sun 19 Feb 2023 23:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:2355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d0:49:4f:46:c8:eb:6c:f0:7b:8c:52:42:fc:98:45:29:7e:52:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 23:50:01 2022 GMT
            Not After : Feb 19 23:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:a3:20:95:d2:88:74:96:9a:45:27:97:39:
                    0d:ab:6a:d5:bf:fb:33:95:06:3d:5c:f7:62:7a:28:
                    95:eb:2e:09:02:5c:e8:24:93:b3:cb:c0:cb:0e:cd:
                    c4:f8:cb:fb:6f:fc:37:e5:3d:ee:9a:30:d9:93:ac:
                    0c:b6:65:de:7b:d1:94:0f:62:ae:04:eb:85:7c:cc:
                    96:22:e7:43:0f:d6:9a:c4:a0:bf:3a:02:c7:c8:c1:
                    ea:89:6d:ae:1f:f9:b8:72:01:d2:1c:6d:13:52:e3:
                    f8:8c:43:31:bf:9c:08:04:29:0c:27:34:5b:42:c7:
                    a5:70:f2:5d:1d:ad:af:95:ee:57:06:aa:8d:ea:2b:
                    e0:f6:27:9d:99:93:05:5a:4e:c2:bf:1b:af:c2:27:
                    8b:27:8a:97:f7:b7:4b:c9:10:66:48:e4:6b:d6:78:
                    d8:2f:5a:a4:55:46:6e:d0:2d:19:99:54:54:c1:7d:
                    bf:07:58:20:58:6b:44:1f:93:d0:43:62:9d:7c:18:
                    77:5b:07:c7:cf:cc:03:02:09:62:97:4c:ef:6c:59:
                    7a:d6:9a:f1:a1:9e:95:e0:72:c3:9e:3d:f0:96:ff:
                    29:ed:bc:c6:2a:f8:b9:c1:5f:9e:1e:e4:8e:22:4b:
                    0c:5a:27:7d:9f:32:44:c7:da:c3:19:85:23:78:9a:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:AF:31:38:4D:D3:BA:9A:D8:4C:4C:75:8D:0F:B2:4B:26:BF:71
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:2355::/80

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:dc:94:5d:f4:c8:8c:76:37:6d:1a:10:92:d4:f0:74:d2:
         59:43:56:2c:d2:6b:18:b8:b5:2a:6f:09:15:3e:2a:e9:27:e4:
         0e:7a:2d:d4:8a:c4:e9:fb:e9:06:49:db:7c:01:12:fe:3a:d3:
         c0:45:ee:e4:0e:7f:ec:bd:5a:a6:78:3f:fd:6d:81:7f:22:b9:
         6a:5a:fb:ae:a3:2e:46:c1:78:a2:9c:43:c4:22:72:02:92:0c:
         c0:b3:89:df:50:33:9e:75:c0:1f:cf:cc:9f:4c:9f:21:6c:20:
         6a:af:d8:98:5e:49:34:7b:5d:5f:91:8a:b3:7a:e5:06:94:43:
         fa:ca:65:a1:9a:3d:69:7e:15:c7:f9:e1:e5:d8:e7:58:c0:6b:
         5e:0f:d6:2f:85:d0:7a:f5:87:25:4f:e6:c4:92:ca:aa:1c:ae:
         be:0f:10:e5:e9:ea:67:01:31:24:dc:88:b6:75:f7:8d:6a:d1:
         3b:92:b6:37:78:f6:61:ed:48:9f:b4:57:40:57:5f:ac:db:29:
         3c:d1:c6:32:87:8a:db:8e:a9:05:da:09:be:02:c3:1d:59:2c:
         10:a5:95:8c:16:04:7b:98:6d:98:6a:fb:15:08:34:2f:10:f4:
         e1:75:1a:1a:da:ed:8b:03:b6:58:94:49:91:94:ad:5b:35:a6:
         96:83:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----